Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9qe5B9kYfNvhk_GoxayJGzemREo.roa
File: 9qe5B9kYfNvhk_GoxayJGzemREo.roa (raw, json)
Hash identifier: YJjNhfQXJuuUEGv0j0DD2jNaQbXzEDbhXl82B5R5tbE=
Subject key identifier: F6:A7:B9:07:D9:18:7C:DB:E1:93:F1:A8:C5:AC:89:1B:37:A6:44:4A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FEFD1327B039B21643080D8F45ED4F5D5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9qe5B9kYfNvhk_GoxayJGzemREo.roa
Signing time: Tue 11 Aug 2026 07:54:52 +0000
ROA not before: Tue 11 Aug 2026 07:54:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 77.93.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:d1:32:7b:03:9b:21:64:30:80:d8:f4:5e:d4:f5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 11 07:54:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6a7b907d9187cdbe193f1a8c5ac891b37a6444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:9f:aa:0e:0a:62:81:02:a4:6a:e5:2d:fd:
cf:ce:e3:e9:9e:52:67:4a:3f:ed:28:69:40:62:ae:
7c:de:24:83:91:c4:9a:50:b0:47:0d:b0:5c:c5:06:
12:a5:6c:dd:0f:a9:90:a2:52:60:c2:a0:6a:5d:2d:
c3:ca:9f:31:0c:f7:66:f6:a9:56:0d:8c:24:87:92:
9c:d8:f3:a9:29:89:3c:11:df:bf:c8:76:b2:f1:c4:
8d:dd:56:7f:2b:62:81:49:4a:4b:86:c1:e2:68:65:
88:81:a5:90:69:1d:6f:a7:2b:1b:a7:8b:48:a6:1f:
01:c5:47:c6:e6:37:7e:8e:ed:67:1f:49:42:ff:9b:
c4:b8:c2:df:35:5d:d6:18:98:21:cc:e3:2e:b6:a8:
2d:3d:84:07:0a:3b:9f:f4:57:b3:bf:ae:45:24:9c:
42:03:e5:95:6d:cb:18:5b:52:19:22:e6:0e:10:7e:
f6:12:15:c9:89:d2:23:e8:49:6a:ba:98:5d:0d:0b:
1d:18:24:79:31:92:ca:ab:d9:ff:ae:01:15:b0:f0:
96:21:a0:39:fb:16:b6:88:48:c4:d1:ef:f2:b8:67:
1b:87:17:fe:25:a4:5e:d5:47:14:44:a8:14:74:dc:
7f:7b:60:89:d9:eb:9a:4e:42:55:f0:06:bf:79:9b:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:B9:07:D9:18:7C:DB:E1:93:F1:A8:C5:AC:89:1B:37:A6:44:4A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9qe5B9kYfNvhk_GoxayJGzemREo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
Signature Algorithm: sha256WithRSAEncryption
20:52:d1:ca:ee:7f:3d:6c:10:42:46:23:d1:82:12:87:db:54:
b0:c6:20:52:f5:2a:51:15:ea:ce:46:fb:90:62:94:52:64:78:
cf:3e:92:0e:49:63:e8:91:76:c2:3c:90:53:50:64:cc:20:dc:
74:8c:60:73:57:c8:c8:29:e7:18:99:d8:6a:bf:23:95:61:11:
d8:8c:27:4a:7c:a1:4a:d3:d6:91:47:59:75:ce:7c:61:b6:3c:
ed:6f:e3:36:36:91:3a:df:2d:7d:3c:db:f3:55:89:bc:8e:08:
e8:d8:26:85:36:f1:da:dd:b4:4b:f5:3a:8b:8d:83:3e:b4:ed:
51:bf:a6:f8:c0:17:3d:56:79:9f:27:97:5a:bb:d2:07:c2:09:
b7:b7:72:1d:38:d3:00:10:26:89:3a:c7:f0:f3:ff:ee:ba:e9:
c4:d2:11:9a:8e:b7:ce:4f:df:6b:b0:ba:f6:51:a8:26:76:d1:
65:41:4d:ff:ae:7e:6a:9e:39:ed:de:10:e4:26:7d:f9:eb:59:
d5:3b:74:54:10:4c:88:56:b5:bf:4f:d7:d2:31:3e:fd:0b:4e:
69:19:07:a9:37:42:a6:22:bd:61:f5:9d:74:6c:c9:d7:4a:bd:
8c:ff:ec:cf:8a:29:84:ac:a3:4d:f3:8c:ae:3f:d1:18:ce:21:
c4:77:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:11 2026 by rpki-client